Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
File:                     E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft (raw, json)
Hash identifier:          BqeKAijYKPNkDYAi+8Vblw30SPVVUlvwO5c3MLX2ByU=
Subject key identifier:   E8:F4:85:46:9E:B1:9F:6E:9D:9B:B2:BE:4D:CF:FA:82:BD:36:24:6D
Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24
Certificate issuer:       /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
Certificate serial:       032C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
Manifest number:          0323
Signing time:             Wed 25 Mar 2026 00:46:22 +0000
Manifest this update:     Wed 25 Mar 2026 00:46:22 +0000
Manifest next update:     Wed 01 Apr 2026 00:46:22 +0000
Files and hashes:         1: E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl (hash: RUgYeIJHLAvKvtFR/Elyk84AA8xOkdoLaqJcepOupKQ=)
                          2: 2475821008E611EDA969EC24C4F9AE02.roa (hash: RVg2h7hOH2w99l5JLC3wkh/gist/wN6AmqKxVj6qbAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812 (0x32c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B60, serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
        Validity
            Not Before: Mar 25 00:46:22 2026 GMT
            Not After : Apr  1 00:46:22 2026 GMT
        Subject: CN=69c3305e-447c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:0c:1e:29:f2:7d:08:66:31:8e:df:fb:2c:
                    9d:9d:f4:f4:fa:bf:05:53:fe:8c:7f:25:41:71:ff:
                    aa:8c:1b:c2:77:44:93:d1:06:1d:19:13:71:be:5c:
                    6b:34:76:9a:09:d2:6f:5b:f6:d4:ac:f1:9e:bd:2c:
                    7d:fc:c7:c0:db:d9:f1:25:fc:be:33:c2:4e:40:1c:
                    79:af:3f:48:9f:b1:2e:23:44:0e:95:d6:18:b6:00:
                    41:c9:10:e5:04:75:e6:24:10:d7:48:78:b0:5f:ec:
                    94:36:06:03:cd:32:b6:21:53:8b:a8:70:88:17:06:
                    6e:aa:23:15:57:6b:ae:9d:99:99:8e:ad:2f:2b:a4:
                    bf:44:1f:29:6e:21:22:98:d3:64:f0:5d:31:62:f4:
                    79:6e:7a:47:aa:bd:c9:48:3c:8c:b4:15:65:92:34:
                    de:61:28:9c:83:00:98:7a:bf:5a:b7:08:b7:42:08:
                    b6:f6:b8:20:4d:ce:b2:d9:f8:e7:d1:69:6e:83:a2:
                    28:5c:b6:21:98:b6:79:13:c0:61:80:a7:47:e8:ed:
                    66:aa:94:e5:6f:26:e2:e2:d6:41:88:b8:d6:c3:0a:
                    e0:38:f7:b5:19:69:44:9c:a0:4e:17:51:4e:4a:7f:
                    cd:3f:e8:a7:29:2a:c5:df:f8:ca:49:12:23:f6:5a:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:85:46:9E:B1:9F:6E:9D:9B:B2:BE:4D:CF:FA:82:BD:36:24:6D
            X509v3 Authority Key Identifier:
                keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4b:5b:ec:f9:ea:17:c8:2a:0b:d9:ab:43:b0:7a:e6:cb:94:
         6b:c4:64:9d:6e:1e:b4:31:37:17:96:ff:38:b2:5d:b7:b3:b2:
         5a:dd:de:40:c0:6c:d0:e6:87:d4:33:50:50:35:e6:e1:4b:d0:
         2f:dc:06:e6:44:b7:95:3c:44:47:d0:17:62:ab:1e:c2:b4:8d:
         73:41:96:5c:4c:74:7c:b1:d1:89:bc:61:6a:f2:e1:31:f6:bf:
         35:8a:44:6e:65:fd:a1:a8:67:c0:40:5d:08:a7:c5:c8:bd:35:
         de:57:d3:69:49:38:0a:09:62:be:61:45:6d:0d:02:9c:9e:50:
         2a:77:30:6e:f2:2c:95:12:c1:3c:24:8a:f5:54:c8:97:18:f6:
         cc:a3:c4:c1:8a:5d:1b:ed:ff:ec:c5:41:f0:69:6a:91:df:09:
         70:8c:b5:27:9e:32:68:88:8f:9c:61:bb:77:6e:87:0f:13:8a:
         05:59:94:1e:ab:bb:6b:e0:b6:1d:04:54:13:1c:d0:50:7d:c2:
         30:e6:46:65:09:f6:0b:0d:49:a6:c3:98:88:ed:37:2b:e0:16:
         c0:3b:a4:e8:eb:cc:93:2e:63:88:ae:7a:e8:5d:a2:08:5f:ce:
         5e:86:c3:ff:14:70:c5:a2:73:a0:5a:5c:26:89:cd:4b:51:91:
         b3:ce:8d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:30 2026 by rpki-client